standard

OMB Circular A-130

The US Office of Management and Budget circular Managing Information as a Strategic Resource, which sets federal policy for managing information resources, including vulnerability management and continuous monitoring.

Known aliases

Managing Information as a Strategic Resource

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

CISA ties federal patch deadlines to four yes-or-no questions about each CVE

BOD 26-04 makes remediation urgency a function of exposure, KEV status, exploit automation and technical impact. CISA publishes three of those four answers per CVE; agencies determine the fourth themselves.

Publishers:cisa.gov

Reality

Evidence72
Adoption: Insufficient
Hype gap+10
Incentives65
Confidence